日本語

CWE-1128 ビュー詳細

CWE-1128

CISQ Quality Measures (2016)
2018-07-23 +00:00
Incomplete
Graph
2025-09-09 +00:00
CWE Mitre.org
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
通知を管理する

名前: CISQ Quality Measures (2016)

This view outlines the most important software quality issues as identified by the Consortium for Information & Software Quality (CISQ) Automated Quality Characteristic Measures, released in 2016. These measures are derived from Object Management Group (OMG) standards.

CWE メンバー

CWE-1129: Weaknesses in this category are related to the CISQ Quality Measures for Reliability, as documented in 2016 with the Automated Source Code CISQ Reliability Measure (ASCRM) Specification 1.0. Presence of these weaknesses could reduce the reliability of the software.
CWE-120: Buffer Copy without Checking Size of Input ベース
CWE-252: Unchecked Return Value ベース
CWE-396: Declaration of Catch for Generic Exception ベース
CWE-397: Declaration of Throws for Generic Exception ベース
CWE-456: Missing Initialization of a Variable ベース
CWE-674: Uncontrolled Recursion ベース
CWE-704: Incorrect Type Conversion or Cast ベース
CWE-772: Missing Release of Resource after Effective Lifetime ベース
CWE-788: Access of Memory Location After End of Buffer ベース
CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor ベース
CWE-1047: Modules with Circular Dependencies ベース
CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data ベース
CWE-1056: Invokable Control Element with Variadic Parameters ベース
CWE-1058: Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element ベース
CWE-1062: Parent Class with References to Child Class ベース
CWE-1065: Runtime Resource Management Control Element in a Component Built to Run on Application Servers ベース
CWE-1066: Missing Serialization Control Element ベース
CWE-1069: Empty Exception Block ベース
CWE-1070: Serializable Data Element Containing non-Serializable Item Elements ベース
CWE-1077: Floating Point Comparison with Incorrect Operator ベース
CWE-1079: Parent Class without Virtual Destructor Method ベース
CWE-1082: Class Instance Self Destruction Control Element ベース
CWE-1083: Data Access from Outside Expected Data Manager Component ベース
CWE-1087: Class with Virtual Method without a Virtual Destructor ベース
CWE-1088: Synchronous Access of Remote Resource without Timeout ベース
CWE-1097: Persistent Storable Data Element without Associated Comparison Control Element ベース
CWE-1096: Singleton Class Instance Creation without Proper Locking or Synchronization ベース
CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element ベース
CWE-1130: Weaknesses in this category are related to the CISQ Quality Measures for Maintainability, as documented in 2016 with the Automated Source Code Maintainability Measure (ASCMM) Specification 1.0. Presence of these weaknesses could reduce the maintainability of the software.
CWE-561: Dead Code ベース
CWE-1041: Use of Redundant Code ベース
CWE-1044: Architecture with Number of Horizontal Layers Outside of Expected Range ベース
CWE-1047: Modules with Circular Dependencies ベース
CWE-1048: Invokable Control Element with Large Number of Outward Calls ベース
CWE-1052: Excessive Use of Hard-Coded Literals in Initialization ベース
CWE-1054: Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer ベース
CWE-1055: Multiple Inheritance from Concrete Classes ベース
CWE-1064: Invokable Control Element with Signature Containing an Excessive Number of Parameters ベース
CWE-1074: Class with Excessively Deep Inheritance ベース
CWE-1075: Unconditional Control Flow Transfer outside of Switch Block ベース
CWE-1080: Source Code File with Excessive Number of Lines of Code ベース
CWE-766: Critical Data Element Declared Public ベース
CWE-1084: Invokable Control Element with Excessive File or Data Access Operations ベース
CWE-1085: Invokable Control Element with Excessive Volume of Commented-out Code ベース
CWE-1086: Class with Excessive Number of Child Classes ベース
CWE-1090: Method Containing Access of a Member Element from Another Class ベース
CWE-1092: Use of Same Invokable Control Element in Multiple Architectural Layers ベース
CWE-1095: Loop Condition Value Update within the Loop ベース
CWE-1121: Excessive McCabe Cyclomatic Complexity ベース
CWE-1131: Weaknesses in this category are related to the CISQ Quality Measures for Security, as documented in 2016 with the Automated Source Code Security Measure (ASCSM) Specification 1.0. Presence of these weaknesses could reduce the security of the software.
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ベース
CWE-78: Improper Neutralization of Special Elements used in an OS Command ベース
CWE-79: Improper Neutralization of Input During Web Page Generation ベース
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ベース
CWE-99: Improper Control of Resource Identifiers ベース
CWE-120: Buffer Copy without Checking Size of Input ベース
CWE-129: Improper Validation of Array Index ベース
CWE-134: Use of Externally-Controlled Format String ベース
CWE-252: Unchecked Return Value ベース
CWE-327: Use of a Broken or Risky Cryptographic Algorithm ベース
CWE-396: Declaration of Catch for Generic Exception ベース
CWE-397: Declaration of Throws for Generic Exception ベース
CWE-434: Unrestricted Upload of File with Dangerous Type ベース
CWE-456: Missing Initialization of a Variable ベース
CWE-606: Unchecked Input for Loop Condition ベース
CWE-667: Improper Locking ベース
CWE-672: Operation on a Resource after Expiration or Release ベース
CWE-681: Incorrect Conversion between Numeric Types ベース
CWE-772: Missing Release of Resource after Effective Lifetime ベース
CWE-789: Memory Allocation with Excessive Size Value ベース
CWE-798: Use of Hard-coded Credentials ベース
CWE-835: Loop with Unreachable Exit Condition ベース

CWE ビュー情報

脆弱性マッピングノート

理由 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
コメント : Use this View or other Views to search and navigate for the appropriate weakness.

対象者

ステークホルダー 説明
Software Developers This view provides a good starting point for anyone involved in software development (including architects, designers, coders, and testers) to ensure that code quality issues are considered during the development process.
Product Vendors This view can help product vendors understand code quality issues and convey an overall status of their software.
Assessment Tool Vendors This view provides a good starting point for assessment tool vendors (e.g., vendors selling static analysis tools) who wish to understand what constitutes software with good code quality, and which quality issues may be of concern.

登録情報

名前 組織 日付 リリース日 Version
CWE Content Team MITRE 2018-07-23 +00:00 2019-01-03 +00:00 3.2

変更履歴

名前 組織 日付 コメント
CWE Content Team MITRE 2020-02-24 +00:00 updated Description, View_Audience
CWE Content Team MITRE 2020-06-25 +00:00 updated References
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2025-09-09 +00:00 updated References

参考文献

REF-968

Automated Quality Characteristic Measures
Consortium for Information & Software Quality (CISQ).
https://www.it-cisq.org/standards/automated-quality-characteristic-measures-maintainability/

CVE Findに掲載されている情報は、慎重に選定された複数の参照ソースから取得されています。CVEデータはMITRE Corporationおよび国家脆弱性データベース（NVD）が提供しています。既知の悪用された脆弱性（KEV）カタログはサイバーセキュリティ・インフラセキュリティ庁（CISA）から、EPSSスコアはFIRST.orgから取得しています。また、ソフトウェアの弱点（CWE）および共通攻撃パターン（CAPEC）に関するデータはMITRE Corporationが管理し、ハードウェアおよびソフトウェア構成（CPE）に関する情報はNVDが提供しています。